This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39352e302f32342d3234203d3e203232373036.roa
File: 3230302e3135322e39352e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier: +tqTsjcVaYBswDhA3pJIoQorYFk5ibmUWMpIDn2hmEw=
Subject key identifier: CF:B0:7C:C7:FC:E7:B3:1C:CD:59:A8:AD:15:FC:BB:53:41:6D:76:2D
Certificate issuer: /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial: 3B6AA4F9175C293062E45CF3A1178299547E1A99
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39352e302f32342d3234203d3e203232373036.roa
Signing time: Fri 21 Nov 2025 13:26:36 +0000
ROA not before: Fri 21 Nov 2025 13:21:36 +0000
ROA not after: Fri 20 Nov 2026 13:26:36 +0000
asID: 22706
IP address blocks: 200.152.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 06 Dec 2025 22:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6a:a4:f9:17:5c:29:30:62:e4:5c:f3:a1:17:82:99:54:7e:1a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Validity
Not Before: Nov 21 13:21:36 2025 GMT
Not After : Nov 20 13:26:36 2026 GMT
Subject: CN=CFB07CC7FCE7B31CCD59A8AD15FCBB53416D762D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:be:fc:b8:2c:d8:0d:7b:c3:05:43:6e:2e:44:
a7:65:55:c0:54:bf:89:24:89:25:ee:c5:99:71:e7:
a8:55:b9:e0:7e:43:f4:5a:de:7e:5c:05:96:03:83:
eb:04:ff:2d:a8:81:a1:63:b3:ac:80:fc:81:b1:73:
29:75:cf:ef:83:65:c4:88:7c:a7:ce:1a:fd:57:ad:
2f:aa:6f:44:03:f2:89:01:85:28:91:f0:79:6d:0c:
84:06:be:2a:6f:dc:3b:71:c5:89:ea:19:7e:b7:31:
50:c5:c2:c6:70:1e:a0:1d:37:25:4c:3f:f0:5a:cb:
9a:51:38:f9:82:58:23:c0:ac:26:c2:9a:6e:3b:dc:
de:24:1d:ab:bb:bd:75:eb:4b:67:d9:c1:36:7a:a8:
f8:77:76:87:ea:5b:45:60:1e:38:cd:b2:8e:1a:41:
86:0d:06:dd:68:7d:e9:9a:da:97:3d:bc:c6:bf:84:
97:61:89:87:9f:59:c6:9a:a5:59:1c:b7:7e:62:5d:
69:fd:5f:a8:f4:a2:34:a2:44:a6:26:55:d3:34:2c:
c1:2e:c5:0f:cd:95:c1:d7:79:73:f1:c2:76:e4:45:
45:a0:4e:0c:5e:10:08:4a:08:83:55:0b:be:c7:31:
3b:f3:84:2f:17:28:a3:6a:f6:5f:90:fb:98:5f:3c:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B0:7C:C7:FC:E7:B3:1C:CD:59:A8:AD:15:FC:BB:53:41:6D:76:2D
X509v3 Authority Key Identifier:
keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39352e302f32342d3234203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.95.0/24
Signature Algorithm: sha256WithRSAEncryption
89:08:9c:c1:fa:c9:90:70:f1:d9:af:30:3d:b9:1f:9c:93:61:
12:02:31:9b:16:4c:9e:b1:e7:83:32:30:28:2b:a2:c1:c2:dc:
d1:20:4b:4d:10:57:4b:e1:9d:83:52:cc:be:f9:78:12:43:c2:
ad:c7:34:22:5b:2b:a7:ea:06:36:0d:ad:2b:48:ca:1a:6a:98:
f5:fa:92:59:73:ef:2f:a4:68:e6:ff:b3:97:d2:ef:83:09:f0:
ae:3a:02:1b:99:93:eb:d9:6f:8c:d1:94:8f:cc:7e:a1:b7:af:
84:13:4c:a1:42:2a:a7:c3:ed:b1:9e:e3:d0:50:60:f8:fa:28:
09:bd:cd:c4:71:cf:bf:17:37:3e:31:42:d4:68:d5:90:f1:82:
8f:75:06:de:e5:53:1f:a0:9f:77:eb:7f:de:55:fe:94:dd:a5:
dd:ee:61:ee:65:f0:e7:0b:5e:03:30:61:6a:9b:c3:9a:8c:06:
e6:17:3c:00:51:4d:8f:e0:de:b0:73:4b:86:bb:7e:91:18:09:
c8:5b:f4:66:c5:be:4b:7a:1c:7a:b5:0d:60:45:12:8a:ff:bb:
be:a7:af:c2:5e:6c:25:ba:71:15:01:74:6d:78:5a:ca:fc:1e:
d4:b1:80:8c:43:1b:21:2f:b6:ae:ef:13:b1:be:c3:06:77:c2:
dd:ef:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:32 2025 by rpki-client